Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
File: yQOCdRxNpmg2pwsS5vX59gkDcJc.mft (raw, json)
Hash identifier: PdeaXseNK0ujzSnEzEOQ23Yfju4snZWDnfFdQSoyAuc=
Subject key identifier: 71:AD:25:FE:A5:8C:0D:BE:43:CC:3A:8B:48:40:58:04:C0:91:7F:08
Authority key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Certificate issuer: /CN=c90382751c4da66836a70b12e6f5f9f609037097
Certificate serial: 019FAA884B757F22CD9F0F85FA2E2E05F9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:26 +0000
Manifest this update: Tue 28 Jul 2026 21:01:26 +0000
Manifest next update: Wed 29 Jul 2026 21:01:26 +0000
Files and hashes: 1: B3DS4HJGG4HWOr7o9IT8qpQjVZI.roa (hash: DzSLMEFuOBEqMQodLY/kdl1XgZrJLKWCvwvjcgrKpKU=)
2: Peen3CtettZzC0PJ5pu05ABu0FY.roa (hash: 5jkaTX/MH1OVfcjWCZ4E7LeORQN6ZsvE/s7yqGM/joo=)
3: bi31Q0XO8XBmiMif1MfQZXUKbN8.roa (hash: MAQCwFvg1XrLXK/b8xx9RuAHmqdb0hXt9uketFPnkuo=)
4: dpx3E6wicTHuvW_Jj3Hg_iG1Xso.roa (hash: 0sKuxPi/M8NOaenb/QR3bdMnX+yJukAyGT+fktwdqXQ=)
5: yQOCdRxNpmg2pwsS5vX59gkDcJc.crl (hash: 8/EGzAvNAoX50HVebqZW2B1E81EpaBn964Ow4W1LXRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:4b:75:7f:22:cd:9f:0f:85:fa:2e:2e:05:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90382751c4da66836a70b12e6f5f9f609037097
Validity
Not Before: Jul 28 21:01:26 2026 GMT
Not After : Jul 29 21:01:26 2026 GMT
Subject: CN=71ad25fea58c0dbe43cc3a8b48405804c0917f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:9f:45:f9:ff:10:13:ba:2b:52:1a:3b:b3:
0a:6e:90:08:a4:4c:d7:0c:4e:ec:e0:d3:59:4f:2b:
7f:a2:3d:b4:bb:4c:85:0c:47:15:e2:fc:01:a4:a9:
57:42:ed:0b:ca:21:b4:5f:76:bb:d8:fe:5a:3c:fb:
fd:ba:81:f4:e7:7b:b4:eb:16:56:87:11:e6:12:ab:
4f:b4:0e:f5:c8:e2:36:8f:0f:0d:54:78:2a:e0:da:
d8:25:ab:50:ae:a4:92:21:48:fc:69:8e:ee:4c:8b:
aa:7b:c3:79:b9:1b:a4:e3:38:f6:58:6f:8c:57:59:
8f:17:75:cf:a7:bf:ee:6a:55:8f:9f:ac:80:a2:01:
8d:a1:7b:bc:67:25:ea:b4:eb:92:04:44:d9:f6:e0:
21:2a:36:71:b3:7d:41:2c:c2:a3:47:78:22:07:8b:
04:7e:99:92:8e:fc:4a:df:d4:90:d3:36:0a:a0:3b:
0c:b6:61:a9:6b:ba:6e:b7:f9:eb:37:34:13:0a:ea:
71:ee:5e:f2:6d:a0:24:e9:99:33:ad:64:21:1f:3d:
3a:2b:b7:b5:cd:eb:8f:7d:f7:db:1b:1b:dd:00:43:
b4:80:62:91:0f:03:10:5d:0a:fb:ad:b8:fb:0f:0f:
d2:31:de:ad:a5:e8:d1:65:d9:ca:2c:e5:ee:e5:86:
2f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:25:FE:A5:8C:0D:BE:43:CC:3A:8B:48:40:58:04:C0:91:7F:08
X509v3 Authority Key Identifier:
keyid:C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:55:cb:9f:d5:9f:a3:db:aa:07:cf:46:33:74:1b:44:98:a7:
10:f3:95:14:4a:91:ea:6b:74:dc:28:db:6c:2e:0c:c4:11:ac:
31:7f:ea:4c:3d:c0:3d:9a:11:f0:bb:dd:9e:c2:b1:13:6a:02:
90:cf:30:12:a1:2f:bf:28:35:48:c4:6a:ee:58:71:7b:56:42:
cf:05:60:d2:50:67:db:49:f3:23:e5:e5:74:c3:3a:e9:bd:2e:
ce:88:49:10:df:93:9e:8b:d2:d6:2e:da:63:5a:cc:22:4e:ba:
a4:83:4f:ff:1b:53:8f:fc:31:fe:2d:b9:79:ab:34:be:35:3e:
f4:37:f4:13:45:65:9d:8b:52:fb:c8:ef:02:78:81:41:db:ae:
0e:70:9a:b2:cd:87:93:70:b0:45:53:84:15:08:69:1a:5b:50:
d4:51:cd:fd:ae:97:0e:fd:af:bc:e4:7e:c0:65:e0:6e:28:56:
80:26:6b:3d:93:be:89:43:a2:30:a0:89:af:cd:b3:3b:58:1e:
60:f1:f8:bf:96:01:7e:1a:be:9b:31:10:ae:d0:f9:48:09:30:
7d:c5:ab:6a:6f:37:b9:3b:fe:75:49:90:ed:35:7d:6a:08:ff:
da:4f:8e:a4:a3:37:26:f5:0a:30:58:05:59:b8:12:01:dd:ae:
ef:ad:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:21 2026 by rpki-client